Secure File Modification with Supervision via Key Fragmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing file sharing systems lack secure mechanisms to ensure that critical actions like viewing and modifying files require the presence of a minimum number of authorized users, and they do not effectively validate supervisors' presence during modifications, which can lead to unauthorized access and forged signatures.
Innovation Solution
A system that divides encryption and signing keys into fragments using a secret sharing protocol, requiring a specific combination of primary and secondary user fragments to reconstruct and use the keys, ensuring that a minimum number of authorized users must be present to view or modify files, and validates their presence through secure connections and signatures.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If file access is restricted to require multiple authorized users, then security is improved, but system complexity increases
Solution Approach 1:
The patent segments the authorization process by dividing user credentials into separate fragments distributed among multiple users. No single user possesses complete access credentials; instead, fragments must be combined to authenticate file access, thereby enhancing security while maintaining manageable system complexity through modular authentication
Solution Approach 2:
The patent implements a nested structure where file access rights are embedded within a hierarchical authorization framework. The system nests multiple levels of validation including fragment verification, supervisor presence confirmation, and digital signature validation, creating layered security without proportionally increasing operational complexity
2Reliability
If supervisors' presence is validated during file modification, then data integrity is improved, but operation time increases
Solution Approach 1:
The patent applies preliminary action by requiring supervisor presence to be validated and confirmed before the actual file modification occurs. The system performs preliminary authentication and authorization checks, ensuring supervisory approval is obtained in advance, which prevents unauthorized modifications while streamlining the subsequent execution phase
Solution Approach 2:
The patent replaces manual supervisory oversight with automated digital validation mechanisms. Instead of relying on physical presence or manual verification processes, the system uses digital signatures, cryptographic validation, and automated authentication protocols to confirm supervisor authorization, thereby maintaining data integrity while significantly reducing the time required for validation
Data Source
AI summary
In some embodiments, a method may be performed by a computing device that involves displaying an identifier indicative of a file, the display of the identifier being readable by a second device, receiving first data from the second device in response to the identifier being read by the second device, and enabling performance of at least one action with respect to the file with use of the first data. In some embodiments, the method may further involve receiving a first encryption fragment associated with the file, receiving, from the second device, a second encryption fragment associated with the file, reconstructing, using at least the first encryption fragment and the second encryption fragment, an encryption key enabling viewing of the file, and viewing the file using the encryption key.